AWS cli high security documentation change
Summary
Added Sybase ASE as a supported database engine type and defined SybaseAseSettings structure with security parameters including SslMode, EncryptPassword, and CertificateArn.
Security assessment
The change introduces explicit security controls for Sybase ASE connections: SSL modes (including verify-ca/verify-full), password encryption during transmission (EncryptPassword=true by default), and certificate-based authentication (CertificateArn). These directly address data-in-transit protection and credential security vulnerabilities.
Diff
diff --git a/cli/latest/reference/dms/create-data-provider.md b/cli/latest/reference/dms/create-data-provider.md index c0c18f1fb..a3c18735c 100644 --- a//cli/latest/reference/dms/create-data-provider.md +++ b//cli/latest/reference/dms/create-data-provider.md @@ -15 +15 @@ - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) » @@ -107 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/dms-20 -> The type of database engine for the data provider. Valid values include `"aurora"` , `"aurora-postgresql"` , `"mysql"` , `"oracle"` , `"postgres"` , `"sqlserver"` , `redshift` , `mariadb` , `mongodb` , `db2` , `db2-zos` and `docdb` . A value of `"aurora"` represents Amazon Aurora MySQL-Compatible Edition. +> The type of database engine for the data provider. Valid values include `"aurora"` , `"aurora-postgresql"` , `"mysql"` , `"oracle"` , `"postgres"` , `"sqlserver"` , `redshift` , `mariadb` , `mongodb` , `db2` , `db2-zos` , `docdb` , and `sybase` . A value of `"aurora"` represents Amazon Aurora MySQL-Compatible Edition. @@ -119 +119 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/dms-20 -> This is a Tagged Union structure. Only one of the following top level keys can be set: `RedshiftSettings`, `PostgreSqlSettings`, `MySqlSettings`, `OracleSettings`, `MicrosoftSqlServerSettings`, `DocDbSettings`, `MariaDbSettings`, `IbmDb2LuwSettings`, `IbmDb2zOsSettings`, `MongoDbSettings`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `RedshiftSettings`, `PostgreSqlSettings`, `MySqlSettings`, `OracleSettings`, `SybaseAseSettings`, `MicrosoftSqlServerSettings`, `DocDbSettings`, `MariaDbSettings`, `IbmDb2LuwSettings`, `IbmDb2zOsSettings`, `MongoDbSettings`. @@ -285,0 +286,37 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/dms-20 +> SybaseAseSettings -> (structure) +> +>> Provides information that defines an SAP ASE data provider. +>> +>> ServerName -> (string) +>> +>>> The name of the SAP ASE server. +>> +>> Port -> (integer) +>> +>>> The port value for the SAP ASE data provider. +>> +>> DatabaseName -> (string) +>> +>>> The database name on the SAP ASE data provider. +>> +>> SslMode -> (string) +>> +>>> The SSL mode used to connect to the SAP ASE data provider. The default value is `none` . +>>> +>>> Possible values: +>>> +>>> * `none` +>>> * `require` +>>> * `verify-ca` +>>> * `verify-full` +>>> + +>> +>> EncryptPassword -> (boolean) +>> +>>> Specifies whether to encrypt the password when connecting to the Sybase ASE database. When set to true, the connection password is encrypted during transmission. Default is true. +>> +>> CertificateArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the certificate used for SSL connection. +> @@ -544 +581 @@ Shorthand Syntax: - RedshiftSettings={ServerName=string,Port=integer,DatabaseName=string,S3Path=string,S3AccessRoleArn=string},PostgreSqlSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},MySqlSettings={ServerName=string,Port=integer,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},OracleSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,AsmServer=string,SecretsManagerOracleAsmSecretId=string,SecretsManagerOracleAsmAccessRoleArn=string,SecretsManagerSecurityDbEncryptionSecretId=string,SecretsManagerSecurityDbEncryptionAccessRoleArn=string,S3Path=string,S3AccessRoleArn=string},MicrosoftSqlServerSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},DocDbSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string},MariaDbSettings={ServerName=string,Port=integer,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},IbmDb2LuwSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},IbmDb2zOsSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},MongoDbSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,AuthType=string,AuthSource=string,AuthMechanism=string} + RedshiftSettings={ServerName=string,Port=integer,DatabaseName=string,S3Path=string,S3AccessRoleArn=string},PostgreSqlSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},MySqlSettings={ServerName=string,Port=integer,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},OracleSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,AsmServer=string,SecretsManagerOracleAsmSecretId=string,SecretsManagerOracleAsmAccessRoleArn=string,SecretsManagerSecurityDbEncryptionSecretId=string,SecretsManagerSecurityDbEncryptionAccessRoleArn=string,S3Path=string,S3AccessRoleArn=string},SybaseAseSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,EncryptPassword=boolean,CertificateArn=string},MicrosoftSqlServerSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},DocDbSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string},MariaDbSettings={ServerName=string,Port=integer,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},IbmDb2LuwSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},IbmDb2zOsSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,S3Path=string,S3AccessRoleArn=string},MongoDbSettings={ServerName=string,Port=integer,DatabaseName=string,SslMode=string,CertificateArn=string,AuthType=string,AuthSource=string,AuthMechanism=string} @@ -588,0 +626,8 @@ JSON Syntax: + "SybaseAseSettings": { + "ServerName": "string", + "Port": integer, + "DatabaseName": "string", + "SslMode": "none"|"require"|"verify-ca"|"verify-full", + "EncryptPassword": true|false, + "CertificateArn": "string" + }, @@ -810 +855 @@ DataProvider -> (structure) ->> The type of database engine for the data provider. Valid values include `"aurora"` , `"aurora-postgresql"` , `"mysql"` , `"oracle"` , `"postgres"` , `"sqlserver"` , `redshift` , `mariadb` , `mongodb` , `db2` , `db2-zos` and `docdb` . A value of `"aurora"` represents Amazon Aurora MySQL-Compatible Edition. +>> The type of database engine for the data provider. Valid values include `"aurora"` , `"aurora-postgresql"` , `"mysql"` , `"oracle"` , `"postgres"` , `"sqlserver"` , `redshift` , `mariadb` , `mongodb` , `db2` , `db2-zos` , `docdb` , and `sybase` . A value of `"aurora"` represents Amazon Aurora MySQL-Compatible Edition. @@ -822 +867 @@ DataProvider -> (structure) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `RedshiftSettings`, `PostgreSqlSettings`, `MySqlSettings`, `OracleSettings`, `MicrosoftSqlServerSettings`, `DocDbSettings`, `MariaDbSettings`, `IbmDb2LuwSettings`, `IbmDb2zOsSettings`, `MongoDbSettings`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `RedshiftSettings`, `PostgreSqlSettings`, `MySqlSettings`, `OracleSettings`, `SybaseAseSettings`, `MicrosoftSqlServerSettings`, `DocDbSettings`, `MariaDbSettings`, `IbmDb2LuwSettings`, `IbmDb2zOsSettings`, `MongoDbSettings`. @@ -988,0 +1034,37 @@ DataProvider -> (structure) +>> SybaseAseSettings -> (structure) +>> +>>> Provides information that defines an SAP ASE data provider. +>>> +>>> ServerName -> (string) +>>> +>>>> The name of the SAP ASE server. +>>> +>>> Port -> (integer) +>>> +>>>> The port value for the SAP ASE data provider. +>>> +>>> DatabaseName -> (string) +>>> +>>>> The database name on the SAP ASE data provider. +>>> +>>> SslMode -> (string) +>>> +>>>> The SSL mode used to connect to the SAP ASE data provider. The default value is `none` . +>>>> +>>>> Possible values: +>>>> +>>>> * `none` +>>>> * `require` +>>>> * `verify-ca` +>>>> * `verify-full` +>>>> + +>>> +>>> EncryptPassword -> (boolean) +>>> +>>>> Specifies whether to encrypt the password when connecting to the Sybase ASE database. When set to true, the connection password is encrypted during transmission. Default is true. +>>> +>>> CertificateArn -> (string) +>>> +>>>> The Amazon Resource Name (ARN) of the certificate used for SSL connection. +>> @@ -1254 +1336 @@ DataProvider -> (structure) - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) »